androvideo vd 1 firmware 230 vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

A broken access control vulnerability found in Advan VD-1 firmware version 230 leads to insecure ADB service. An attacker can send a POST request to cgibin/AdbSetting.cgi to enable ADB without any authentication then take the compromised device as a relay or to install mining sof...

Androvideo Vd 1 Firmware 230

7.5

CVSSv3

A broken access control vulnerability found in Advan VD-1 firmware versions up to 230. An attacker can send a POST request to cgibin/ApkUpload.cgi to install arbitrary APK without any authentication.

Androvideo Vd 1 Firmware

6.1

CVSSv3

A XSS found in Advan VD-1 firmware versions up to 230. VD-1 responses a path error message when a requested resource was not found in page cgibin/ssi.cgi. It leads to a reflected XSS because the error message does not escape properly.

Androvideo Vd 1 Firmware Geovision Gv-vr360 Firmware Geovision Gv-vd8700 Firmware

7.5

CVSSv3

A relative path traversal vulnerability found in Advan VD-1 firmware versions up to 230. It allows malicious users to download arbitrary files via url cgibin/ExportSettings.cgi?Download=filepath, without any authentication.

Androvideo Vd 1 Firmware Geovision Gv-vr360 Firmware Geovision Gv-vd8700 Firmware

9.8

CVSSv3

A vulnerability of remote credential disclosure exists in Advan VD-1 firmware versions up to 230. An attacker can export system configuration which is not encrypted to get the administrator’s account and password in plain text via cgibin/ExportSettings.cgi?Export=1 without ...

Androvideo Vd 1 Firmware Geovision Gv-vr360 Firmware Geovision Gv-vd8700 Firmware

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook